2293 matches found
AppArmor.d
apparmor.d Full set of AppArmor profiles !WARNING This project is still in its early development. Help is very welcome; see the documentation website including its development section. Description AppArmor.d is a set of over 1500 AppArmor profiles whose aim is to confine most Linux based...
dirtyfrag-arm64
dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...
ehir-vuln-enterprise-login
Enterprise Corporate Portal Local Setup This project contains a local containerized setup featuring a frontend portal and an integrated backend gateway. Workspace Structure client/: Contains the static frontend files index.html using Bootstrap 5 and the API connection handler. docker-compose.yml:...
codejail
CodeJail CodeJail manages execution of untrusted code in secure sandboxes. It is designed primarily for Python execution, but can be used for other languages as well. Security is enforced with AppArmor. If your operating system doesn't support AppArmor, or if the AppArmor profile is not defined a...
security-baseline-ubuntu
☕ Support the Project If this practical guide has saved your host from compromise, helped you configure your security baseline, or saved you hours of debugging AppArmor and Firejail profiles, you can support the author and further development of this open-source initiative. ⚠️ OPSEC Warning:...
proxmox-lxc-docker-fix
Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...
CVE-2016-6187_LPE
CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...
CVE-2026-46331-pedit-COW-detection
CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...
tfo-connect-bypass
Using TCP Fast Open to Bypass Syscall-based Networking Rules CVE-2026-63828/CVE-2026-72243 PoC TCP Fast Open TFO is a method of initializing and using a TCP connection where the client can send data in the initial SYN packet sent to the server. This extension to the TCP protocol was implemented f...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed an issue where an uninitialized pointer was passed to auditloguntrustedstring. Commit 4a134723f9f1 “AppArmor: moved the check for aanull file to cover all cases”. It corrected a minor bug where pathname might...
Astra Linux – vulnerability in linux-6.18
In the Linux kernel, the following vulnerability has been resolved: AppArmor: fix race in unix socket mediation when peerpath is used Holding a reference to the peersk is not enough to ensure access to the peersk path. Accessing the path outside of the state lock allows for a race with...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: AppArmor: policyint ensures that list heads are initialized prior to the fail path. If profile creation fails before policyinit is completed, the list heads are not properly initialized, causing profilefree sanity checks to trigg...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146629)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146629 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146148)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146148 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146274)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146274 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142705)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142705 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142683)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142683 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142719)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142719 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142692 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing...
